ariff

Even if directory indexing is turned off, you can still access files like this http://yourdomain.com/wp-includes/admin-bar.php thus revealing the username for ftp account.

Don’t know how severe this issue is as I’m not an expert. Just pointing this out. If anybody feel that something should be done, then by all means do something.

If not, then thanks for reading.

Cheers!